40,000 Twitch Streamers' Data Allegedly Scraped and Sold on Dark Web

• •A hacker claims to have stolen data from 40,000 Twitch streamers.
• •The data appears to be scraped rather than stolen directly from Twitch.
• •Twitch has advised users to enhance their security and remove risky browser extensions.

A hacker is offering a database containing personal information of around 40,000 Twitch streamers on a dark web marketplace. The dataset includes usernames, email addresses, legal names, follower counts, and account verification statuses. Researchers believe the data was likely obtained through scraping rather than a direct breach of Twitch, as much of the information is publicly available. However, hidden email addresses suggest potential exploitation of the Twitch API using stolen access tokens. Twitch has not confirmed any breach but has advised users to enhance their account security. The incident raises concerns about targeted phishing risks for streamers, as the aggregated data could facilitate social engineering scams. The database was advertised on September 9, 2026, and researchers have examined a sample of 501 records. Twitch has urged users to remove third-party browser extensions and review their account security settings.